Networks & edges
VLANs and admin access on nfSense, session-only hostapd + dnsmasq on a ThinkPad radio, FortiGate config backups, and small Linux helpers for interface / subnet / gateway checks. I like traffic I can draw on a napkin.
Systems · Cloud · Automation
Reliable systems — less heroics, more quiet uptime.
Cloud, networks, automation — and a home lab that never quite shuts down even if its only a raspberrypi.
About
I'm based in the Dayton area and I've spent most of my career on identity, endpoints, and the automation that keeps servers and networks working together. I like ownership, clean automation, and making complex infrastructure feel a little more human.
Outside of work you'll find me on Metro Parks trails, tinkering with 3D printers over WireGuard, or spinning up another VM to learn something new.
Lab
The working stack
The GitHub pile is mostly private notes and scripts. This is the readable version — clusters of work for people who live in the same stack.
Hosts, mail & backups
Restic from a VPS into an encrypted repo on the home NAS (systemd timer, snapshot checks, documented restore). Self-hosted mail with SPF / DKIM / DMARC. Host config snapshots so a rebuild is not a memory test.
Apps I ship
This site: Flask + JSON content, Docker/gunicorn, nginx, GitHub Actions deploy. ocean-market is a Node shop with SQLite, CSRF, cart, and mail. Earlier storefront experiments sit in the same pile.
Windows & endpoints
PowerShell to strip the noisy default Win11 surface, plus script repos for the jobs that still live on Windows. Day-job background is Autopilot / Intune / imaging — the scripts keep that muscle warm.
Hands-on lab
Ender-3 Pro (Cura + Marlin headers) over WireGuard/OctoPrint, RTL-SDR on the firewall box, a tiny MNIST notebook, Android emulator notes, Raspberry Pi odds and ends. I learn by standing something up.
Box search for property docs
Feed a CSV of property IDs. Scripts hunt deed and policy versions in the likely folders first, then fall back to a full-tenant search. Hits land in a CSV with file IDs; a second script copies them into a working folder, a third downloads the set. That is how lease and title docs came off a 25,000+ property Box tree without a week of clicking.
Work
What I shipped
Not a résumé dump — things I built, ran, or shaped. The lab above is the current working set; this is the paper trail.
This site — adavis.cloud
Personal · adavis-portfolio
Flask portfolio with JSON content, admin UI, theme studio, Docker/gunicorn, nginx, and a GitHub Actions deploy to the VPS. The site is the product and the runbook.
ocean-market
Personal · adavis.shop
Self-hosted Node shop: SQLite, cart, CSRF, mail, Docker, and a separate hosting runbook. Lives next to the portfolio on the same VPS without stepping on it.
Restic backups to NAS
Personal · znas-backups
Nightly restic pulls of project files off the zen88 VPS (portfolio, ocean-market, mailserver, nginx/certs) into an encrypted repo on the home NAS, with a user systemd timer at 03:15, snapshot checks, and a restore path documented for rebuilding the VPS. Retention: 7 daily / 4 weekly / 12 monthly. Laptop repos planned next.
Wi-Fi AP on a ThinkPad
Personal · hostapd-p14s
Session-only access point on a Lenovo ThinkPad P14s: hostapd + dnsmasq on the Realtek radio, NAT out the wired NIC, tagged iptables rules that play nice with Docker and UFW. Phones join over 2.4 GHz WPA2; start.sh/stop.sh bring it up and tear it down without touching NetworkManager on boot.
nfSense VLAN notes
Personal · nfsensei-vlans
Lab notes for carving VLANs and admin access on a home nfSense box — the kind of write-up I want when I am staring at the wrong interface at 1am.
win11-cleanse
Personal
PowerShell to strip the default Windows 11 noise so a workstation is usable again. Public so other operators can steal the bits that help.
Azure & remote network access
Vinebrook Homes
Designed BGP between remote sites and Azure, tightened NSGs/firewalls, and kept Windows, Linux, and cloud identity operating as one system. Day-to-day DNS (A, CNAME, TXT, PTR) and cert work (OpenSSL, PEM/PFX, RSA and Ed25519 keys).
Azure platform
Vinebrook Homes
App Service, WAF, and Azure logging/diagnostics. Identity-backed app access, certs, and the usual DNS record hygiene that keeps it all resolving.
Identity, SSO & 2FA
Vinebrook Homes
Azure AD / Entra ID (cloud + on-prem), PowerShell and Bash for identity automation. SSO and 2FA for GitHub and Bitwarden; repo permissions and access reviews with the dev team.
Endpoints & mobile
Vinebrook Homes
Microsoft Autopilot, Intune Win32 packaging (Content Prep Tool), IBM MaaS360 device provisioning, and hands-on laptop work (storage, RAM, imaging). Remote access via BeyondTrust.
Observability & scanning stack
Vinebrook Homes
Highly customized Nagios in Docker, plus OpenVAS, Portainer, Grafana, and Prometheus. Containerized SFTP and compose-based services ops can actually operate.
Property docs at scale
Vinebrook Homes · box-search
Custom Box CLI + PowerShell pipeline to search, copy, and download lease and title docs across 25,000+ properties — automation that cut days of manual work.
Collaboration & data
Vinebrook Homes
Salesforce, Microsoft Teams, Slack, Zoom, Tableau, plus MSSQL and MySQL for the apps that sit underneath.
Network verification portal
CBTS
Lead developer on a full-stack portal to load and verify network gear, plus automation that fed global monitoring and DNS zone workflows.
99.99% circuit uptime
DataYard
Small DevOps crew delivering HA bonded L2/L3 circuits, SD-WAN, fiber/wireless, and hardened edge security.
Data center modernization
WorkflowOne
Cisco → Juniper/Aruba, F5 LTM/ASM, converted ~50 remote sites off leased CSUs, built monitoring and firewall reporting teams actually used.
Mail & DNS for adavis.shop
Personal
Self-hosted mail (docker-mailserver) with SPF, DKIM, and DMARC (p=reject). Webmail, IMAP, and DNS records owned end-to-end.
Gallery
AiArt
Pieces generated with AI. Hover for a note, click for the full image.
Craft
Tools I reach for often — not a checklist, just the working set.
Drag to reorder. Click a chip to splash a random color.
Off the clock
Life outside the terminal
Trails
Hiking and biking the Dayton MetroParks. Completed the Trails Challenge in 2023. Gardening and landscaping when I'm home.
3D print
Still learning, still printing. Remote monitoring with Raspberry Pi, OctoPrint, and WireGuard so I can check jobs from anywhere.
Lab
Cloud VMs, Docker, VirtualBox, WSL, Ubuntu — a sandbox for trying network designs and OS setups without breaking production.
ROLES
2019 —
Senior Systems Engineer
Vinebrook Homes
2014 — 2019
Senior Automation Specialist
CBTS
2013 — 2014
Senior Network Administrator
DataYard
2006 — 2013
Network Administrator
WorkflowOne
1999 — 2007
Front End Supervisor
Kroger
Contact
Want to talk infrastructure, automation, or trail recommendations around Dayton? Reach out.